CLAIMS 

What is claimed is: 

1 1 A method for dispensing and evidencing indicia by an indicia generating device in a 

2 system having a plurality of indicia generating devices that have been divided into n groups, 

3 each of the indicia generating devices for generating and printing indicia on a media that is 

4 to be received at a plurality of establishments, wherein the establishments are associated 

5 with different geographic designations, the method comprising the steps of: 

%2 6 (a) receiving a plurality of verification keys, wherein each one of the received 

1^7 verification keys is encrypted as a function of a respective geographic 

8 designation; 

III 

^ "9 (b) receivingaplurality of key IDs, wherein each one of the key IDs is 

f i^lO associated with one of the verification keys and is encrypted as a function of 

iij 

CiJll the same geographic designation used to encrypt the corresponding 

i il2 verification key; 

13 (c) in response to receiving a request to generate an indicium for a media 

14 destined for a particular one of the establishments, evidencing the indicium 

15 by; 

16 (i) generating one of the verification keys and the corresponding key ID 

17 assigned to indicia generating device's group based on the 

1 8 geographic designation associated with the particular estabhshment, 

19 and 



1817P 



-15- 



(ii) using the generated verification key to create a digital signature, and 
digitally signing the indicia by including the digital signature and the 
generated key ID in the indicia. 

2 The method of claim 1 further including the steps of: 

receiving a master secret key and a secret key; and 

and generating the verification keys and the key IDs assigned to the group using the 
master secret key and a secret key. 

3 The method of claim 2 further including the step of generating and printing indicia for 
postage on a mail piece that is to be received at a plurality of distribution centers. 

4 The method of claim 4 further including the step of verifying the indicia at a destination 
distribution center. 

5 The method of claim 4 further including the step of verifying the indicia at an originating 
distribution center. 

6 The method of claim 3 further including the step of using zip codes to represent the 
geographic designations. 

7 The method of claim 1 further including the step of generating and printing indicia for 
tickets. 
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1 8 The method of claim 1 further including the step of distributing to each one of the 

2 establishments, the verification keys and the key ID*s that were encrypted as a function of 

3 the geographic designation associated with the establishment. 
1 

1 9 The method of claim 8 further including the step of verifying the indicia upon receipt at 

2 the particular establishment by using the key ID on the indicia and the distributed 

3 verifications keys to compute a digital signature, and comparing the computed digital 

4 signature with the digital signature on the indicia. 
1 

1 1 0 A computer readable media containing program instructions for dispensing and 

2 evidencing indicia by an indicia generating device in a system having a plurality of indicia 

3 generating devices that have been divided into n groups, each of the indicia generating 

4 devices for generating and printing indicia on a media that is to be received at a plurality of 

5 establishments, wherein the establishments are associated with different geographic 

6 designations, the instructions for: 

7 (a) receiving a plurality of verification keys, wherein each one of the received 

8 verification keys is encrypted as a function of a respective geographic 

9 designation; 

1 0 (b) receiving a plurality of key IDs, wherein each one of the key IDs is 

1 1 associated with on of the verification keys and is encrypted as a function of 

12 the same geographic designation used to encrypt the corresponding 

13 verification key; 

14 (c) in response to receiving a request to generate an indicium for a media 
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1 5 destined for a particular one of the establishments, evidencing the indicium 

16 by; 

1 7 (i) generating one of the verification keys and the con-esponding key ID 

18 assigned to indicia generating device's group based on the 

19 geographic designation associated with the particular establishment, 

20 and 

2 1 (ii) using the generated verification key to create a digital signature, and 

22 digitally signing the indicia by including the digital signature and the 

23 generated key ID in the indicia. 
1 

1 11 The computer readable media ofclaim 10 fiirther including the instructions of: , 

2 receiving a master secret key and a secret key; and 

3 and generating the verification keys and the key IDs assigned to the group using the 

4 miaster secret key and a secret key. 
1 

1 12 The computer readable media ofclaim 1 1 fiirther including the instruction of generating 

2 and printing indicia for postage on a mail piece that is to be received at a plurality of 

3 distribution centers. 
1 

1 13 The computer readable media ofclaim 12 fiirther including the instruction of verifying 

2 the indicia at a destination distribution center. 
1 

1 14 The computer readable media ofclaim 12 fiirther including the instruction of verifying 
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2 the indicia at an originating distribution center. 
1 

1 1 5 The computer readable media of claim 1 1 further including the instruction of using zip 

2 codes to represent the geographic designations. 
1 

1 1 6 The computer readable media of claim 1 0 further including the instruction of generating 

2 and printing indicia for tickets. 
1 

1 17 The computer readable media of claim 10 further including the instruction of distributing 

2 to each one of the establishments, the verification keys and the key ID's that were encrypted 

3 as a function of the geographic designation associated with the establishment. 
1 

1 1 8 The computer readable media of claim 1 7 further including the instruction of verifying 

2 the indicia upon receipt at the particular establishment by using the key ID on the indicia 

3 and the distributed verifications keys to compute a digital signature, and comparing the 

4 computed digital signature with the digital signature on the indicia. 
1 

1 19 An indicium generating device for generating and printing indicia on a media that is to 

2 be received at a plurality of establishments, wherein the establishments are associated with 

3 different geographic designations, comprising: 

4 means for receiving a pluraUty of verification keys, wherein each one of the received 

5 verification keys is encrypted as a function of a respective geographic designation; 

6 means for receiving a plurality of key IDs, wherein each one of the key IDs is 
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7 associated with one of the verification keys and is encrypted as a function of the same 

8 geographic designation used to encrypt the corresponding verification key; 

9 means for generating and evidencing an indicium for a media destined for a 

10 particular one of the establishments, including means for generating one of the verification 

1 1 keys and the corresponding key ID assigned to indicia generating device's group based on 

12 the geographic designation associated with the particular establishment, and means for 

1 3 creating a digital signature using the generated verification key and for digitally signing the 

14 indicia by including the digital signature and the generated key ID in the indicia. 
1 

L.J 

^ 1 20 The indicium generating device of claim 19 wherein the indicium generating device 

f =f 2 fiirther receives a master secret key and a secret key, and generates the verification keys and 

3 the key IDs using the master secret key and a secret key. 

1 iJ 

I • s 
i. :S 

" 1 

[ !.] 

fji 1 21 The indicium generating device ofclaim 20 wherein the indicium is generated and 

iij 

f :j 2 printed as postage on a mail piece that is to be received at a plurality of distribution centers. 

t; .J 

c;i 1 

1 22 The indicium generating device of claim 21 wherein indicia is verified at a destination 

2 distribution center. 
1 

1 23 The indicium generating device of claim 21 wherein indicia is verified at an originating 

2 distribution center. 
1 

1 24 The indicium generating device of claim 20 wherein the geographic designations 
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2 comprise zip codes. 

1 

1 25 The indicium generating device of claim 19 wherein the indicium is generated and 

2 printed for tickets. 
1 

1 26 The indicium generating device of claim 19 wherein the verification keys and the key 

2 ID'S that were encrypted as a function of the geographic designation associated with the 

3 establishment are distributed to each one of the establishments. 
1 

L .1 

Q 1 27 The indicium generating device of claim 26 wherein the indicia is verified upon receipt 

b '• • 

5=1 2 at the particular establishment by using the key ID on the indicia and the distributed 

tQ 

I" 3 verifications keys to compute a digital signature, and comparing the computed digital 

[y 
I ■ I 

4 signature with the digital signature on the indicia. 




a 1 28 A method for dispensing and evidencing postage indicia by a postage generating device 

I. J 

U 2 (PGD) in a system having a plurality of PGDs that have been divided into n groups 

3 identified by a group designation G/, z = 1,. . .n, the method comprising the steps of: 



4 (a) receiving a master secret key K and a secret key Kj; 

5 (b) in response to receiving a request to generate an indiciiun for a mail piece 

6 destined for a particular postal destination Dest, generating the indicium; 

7 (c) computing a verification key Vf*^^ as a function of the secret key AT/ and the 

8 postal destination; 

9 (d) computing a key ID //^^^ as a function of the master secret key K and the 
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postal destination; 

(e) using the computed verification key Vf^^^ to create a digital signature for the 
indicia; and 

(f) digitally signing the indicia by including the digital signature and the 
computed key ID 1^^^^ on the indicia. 

29 The method of claim 28 further including the step of computing each verification key 
Vi^^^ as a one-way fimction H of the PGD group kcyK- and a designation of the postal 
destination: 



30 The method of claim 29 fiurther including the step of using ZIP codes to designate the 
postal destination. 

31 The method of claim 30 fiirther including the step of computing each of the key ID's as a 
one-way fiinction //of the PGD group, G/, the master secret key, K, and a designation of the 
postal destination, Dest: 



Dest 



= H(Ki,Dest). 



Dest 



= H{K,Dest,G,). 
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